CVE-2026-14679

8.2 highEPSS 0.3%

High (8.2) in postgresql postgresql. EPSS 0.3% chance of exploitation in the next 30 days.

Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.

Severity

CVSS 3.1

8.2 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-121
Published: 2026-08-13
Modified: 2026-08-29
Record from: the NVD, synced 2026-10-19

Affected

postgresql:postgresql

References

https://www.postgresql.org/support/security/CVE-2026-14679/

Check your stack JSON